Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/om4VxJg_EwoZ2XXgILn0fisvLQY.roa
File: om4VxJg_EwoZ2XXgILn0fisvLQY.roa (raw, json)
Hash identifier: s25J1xQHjQ65crmABOsGysKVu/gtQ0y4wxMoxIeCQJY=
Subject key identifier: A2:6E:15:C4:98:3F:13:0A:19:D9:75:E0:20:B9:F4:7E:2B:2F:2D:06
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A19A6D21DBFAE4BAA89F6C933E12AED8C8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/om4VxJg_EwoZ2XXgILn0fisvLQY.roa
Signing time: Mon 02 Nov 2026 04:03:25 +0000
ROA not before: Mon 02 Nov 2026 04:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 24
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Nov 2026 06:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:6d:21:db:fa:e4:ba:a8:9f:6c:93:3e:12:ae:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Nov 2 04:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a26e15c4983f130a19d975e020b9f47e2b2f2d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:43:36:2d:03:76:8e:c9:58:7b:b4:0a:c9:
85:ce:cd:fe:e8:77:25:fd:59:d5:6b:54:a5:19:b6:
ec:61:6e:82:11:88:33:af:f5:03:36:3a:41:ba:26:
46:c3:d0:73:9e:ef:64:71:3f:fd:f8:8d:d6:4f:96:
4a:01:25:5a:f1:36:37:59:34:d1:03:9d:8a:84:44:
a7:56:27:7c:21:0c:4d:36:6b:63:1f:69:e7:a6:7f:
d0:49:e8:0e:b0:50:33:fa:a9:18:c5:85:64:73:8a:
2d:8f:d9:3c:0b:cc:b1:a2:42:ae:b2:36:16:8e:f0:
6c:e0:03:66:e6:4c:04:08:1a:94:10:60:9a:3e:26:
a9:2b:6f:8a:8e:96:79:8c:1b:68:79:06:c5:d4:f5:
0c:b7:a7:19:48:69:74:0b:9a:aa:de:fe:26:0a:68:
27:72:64:b9:1a:59:62:40:cb:52:04:ec:40:10:4c:
bc:b8:3b:46:a8:73:d2:3f:40:5e:c5:6f:e6:ae:9e:
a0:26:df:07:9a:8d:88:26:32:c3:11:89:06:b7:48:
f7:e4:66:4c:6a:fc:8d:b5:9e:9c:5f:b3:26:ac:b7:
de:48:2c:e8:ab:d8:63:07:21:45:72:6f:ee:4b:20:
f6:be:5d:04:a7:29:4d:7d:a4:93:65:0e:ed:7f:d1:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:15:C4:98:3F:13:0A:19:D9:75:E0:20:B9:F4:7E:2B:2F:2D:06
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/om4VxJg_EwoZ2XXgILn0fisvLQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.42.0/23
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
d0:85:b2:97:42:24:13:25:fb:73:3f:e1:3e:e8:21:18:6f:75:
68:af:19:dd:3a:01:b0:76:5f:2c:5f:24:96:c4:9f:3f:f8:d1:
84:8a:0b:43:1b:f6:76:9a:ae:75:7b:cb:1f:a9:64:18:a2:9a:
fe:83:5d:e8:17:a0:23:8d:e4:b0:ef:86:26:84:b0:ef:5a:27:
7b:4d:a5:48:08:a0:b5:97:87:81:51:02:b6:bd:c5:c5:8c:fa:
51:e6:a8:61:af:2d:4c:90:57:04:aa:4d:c3:44:65:ee:8d:80:
f0:25:02:e4:44:33:5c:b3:3d:14:94:07:bb:94:28:12:83:e7:
fb:9f:6d:dd:3a:cd:80:dd:2b:9c:30:2c:65:31:ba:a9:79:fa:
f5:46:46:7d:3c:c4:dc:3f:61:4a:bd:c4:b7:44:e9:56:95:92:
de:ca:69:14:3b:37:d2:cb:89:74:34:83:25:76:9f:26:d0:8d:
58:3c:b4:5a:7e:e3:67:f7:15:1e:5d:8c:8d:55:34:f4:cf:c1:
8a:cb:02:74:2e:26:95:11:e7:bf:29:0d:fe:53:db:89:94:ee:
b9:f8:67:e6:d7:48:7b:6f:ed:61:6b:fa:5e:db:0d:06:44:52:
a5:25:40:01:ef:dd:cf:0b:64:8d:e3:6b:07:ee:0b:9e:a7:81:
02:98:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:26 2026 by rpki-client